ANSSI says stolen staff passwords let an attacker take data on about 600,000 French taxpayers and firms, and the theft went undetected for seven weeks. Its report blames password-only portals, a flat government network and a reset that left the attacker's session open.
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap0
- Incentives40
- Confidence68
ANSSI says an attacker used dozens of stolen DGFIP staff passwords on password-only portals to take data on over 600,000 French taxpayers and businesses. For other operators, the fixes are login checks on devices they do not manage and a password reset that also ends live sessions.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap0
- Incentives
- Insufficient
- Confidence55
678,000 DGFiP records are being marketed with names, addresses and income figures together. France logged 33 of CertiK's 52 verified physical coercion attacks on crypto holders in H1 2026.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+25
- Incentives40
- Confidence60
France's tax authority says an intruder used a stolen or misused identity to reach its systems in late June and extract data on individuals and businesses before access was cut.
Perspective Coverage
6 publishers
- Builder
- Builder 28%
- Operator
- Operator 62%
- Investor
- Investor 10%
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap+10
- Incentives60
- Confidence68
Meria's Owen Simonin ties a wave of calls impersonating Binance and his own support desk to France's pile-up of data leaks. The state cyber agency was already recording the same script in January, before the DGFiP intrusion.
Reality
- Evidence47
- Adoption44
- Hype gap+28
- Incentives68
- Confidence55
Four hooded men entered a house near Lens at 4 a.m. on Sunday and left more than three hours later with 40,000 euros in crypto taken from a salaried IT worker. Bethune prosecutors are treating it as organized extortion.
Reality
- Evidence68
- Adoption61
- Hype gap+12
- Incentives38
- Confidence66
An intruder inside the work platform shared by Japanese ministries took names, emails and phone numbers belonging to 246,000 staff and contractors, and the agency says none of it has shown up in a confirmed case of misuse.
Reality
- Evidence42
- Adoption45
- Hype gap+35
- Incentives62
- Confidence40
PDFik's write-up on shipping Factur-X output argues the container, not the XML attachment, is the hard part, and that a clean validator run says nothing about whether German or French rules accept the file.
Reality
- Evidence58
- Adoption52
- Hype gap+12
- Incentives75
- Confidence55
France's DGFiP confirmed tax and property data exposure for 678,000 filers while GitLab fixed an unauthenticated project-deletion bug. Both arrived with figures a team can act on.
Reality
- Evidence48
- Adoption42
- Hype gap+12
- Incentives44
- Confidence52
DGFiP says the intruder used a stolen employee identifier and an authorised third party's credentials, and claimed to bypass MFA. No zero-day was involved.
Reality
- Evidence63
- Adoption71
- Hype gap+12
- Incentives74
- Confidence58